Method for protecting against keylogging of user information via an alternative input device

Abstract

A method for protecting against keylogging, the method includes: detecting from a host browser application, a request for a password input by a user of an alphanumeric input device in an entry field of a transaction; inserting a temporary indicator password in the entry field; sending an identifier of the host application with the temporary indicator password to an alternative device; retrieving a user assigned password stored in a table in the alternative device in response to matching the identifier of the host application and the temporary indicator password; sending the user assigned password to the host application; inserting the user assigned password in place of the temporary indicator password in the entry field; and sending the transaction to a server for verification and further processing.

Description

BACKGROUND OF THE INVENTION[0001]1. Field of the Invention[0002]The present invention relates generally to computer network security and, more particularly, to a method, article, and system for preventing password theft through unauthorized keylogging.[0003]2. Description of the Related Art[0004]Keylogging is a technological process of monitoring computer activity by recording, transmitting, and examining the characters typed on a computer keyboard. Employers monitoring employee productivity, typically involving clerical tasks sometimes use the keylogging technique. Other, more nefarious implementations of keylogging programs involve espionage, such as those embodied in spyware programs. These programs attempt to gather confidential information, such as a text string including an account name and password, and particularly a text string of keyboard strokes following input of a particular web site address. For example, a mouse click on a web browser icon displays the configured home ...

AI Technical Summary

Benefits of technology

The present invention provides a method for preventing keylogging in a host browser application. The method involves detecting a user's request for a password input in a transaction entry field and inserting a temporary indicator password. The temporary indicator password is sent to an alternative device where a user-assigned password is stored. The user-assigned password is then sent back to the host application and inserted in place of the temporary indicator password. The transaction is then sent to a server for verification and further processing. This method helps to prevent unauthorized access to sensitive information and ensures secure transactions.

Problems solved by technology

Keylogging programs, once installed and activated on a computer system, are extremely difficult to detect.

Commercial and freeware spyware detection programs are available, but they are only useful against identified threats listed in the anti-spyware definitions file.

However, standard anti-spyware detection programs may not identify new and more recent variations of spyware keylogger programs.

While this technique will thwart keyloggers, it is largely unused by the majority of computer users because the remapped keyboard departs from what is traditionally coordinated with the “muscle memory” of touch typists familiar with standard keyboard layouts.

However, such approaches carry the risk of being defeated by hackers through the use of capturing and transmitting screen shots of completed forms, which are then analyzed for the confidential information.

Images